CVE-2018-1025

Опубликовано: 09 мая 2018

Источник: nvd

CVSS3: 4.3

CVSS2: 4.3

EPSS Низкий

Описание

An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability." This affects Internet Explorer 11, Microsoft Edge.

Ссылки

http://www.securityfocus.com/bid/103984
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040844
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1025
Patch
Vendor Advisory
http://www.securityfocus.com/bid/103984
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040844
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1025
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.05133

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2018-1025

CVSS3: 4.3

msrc

около 7 лет назад

Microsoft Browser Information Disclosure Vulnerability

GHSA-5xph-3pch-mgwr

CVSS3: 4.3

github

около 3 лет назад

EPSS

Процентиль: 89%

0.05133

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo